Privacy policy
Sai Agora, by Riyea · updated 14 October 2026 · Português
Who we are
Sai Agora is an independent project by Riyea (Luís Mota), not affiliated with Metropolitano de Lisboa. Contact: riyea.studio@gmail.com.
Location
Only if you allow it. It is used to show the stations nearest to you and to work out how long you need to walk to the platform.
- Your position is rounded (to about 10 m) and sent to our server, which calculates the walking route with OpenStreetMap services (Valhalla, FOSSGIS) and finds the street you are on (Nominatim).
- We do not store your location or link it to you. Responses are kept in a temporary cache, keyed only by the rounded coordinates.
- Location is only used while the app is open. You can revoke the permission in your phone’s settings (on iPhone, Settings › Sai Agora › Location; on Android, Settings › Apps › Sai Agora › Permissions).
- Instead, you can type an address. The text is sent to our server, which looks it up on Nominatim; the chosen address is stored only on your phone and treated like the location above.
Searching for addresses, hotels and places
What you type to find a destination is looked up like this:
- on iPhone, by Apple Maps, directly from your phone (under Apple’s privacy policy);
- on Android, by our server, which asks Photon (komoot, OpenStreetMap data) or, if that fails, Nominatim. The server only sends the search text and the language, never your location, and keeps the answers in a temporary cache keyed by the text.
Well-known places (the airport, museums, viewpoints…) are built into the app and searched offline. Recent destinations stay on your phone.
Motion sensors
If you turn it on in Settings › On the train, the app uses your phone’s motion sensors and barometer to tell whether you are on a train and at which stop. Everything is worked out on the phone: this data never leaves it and is not stored.
Leave-now alerts
If you turn on alerts, our server keeps what it needs to notify you:
- a random identifier created by the app (it does not identify you or your device outside this app);
- your phone’s notification address (an Apple token, a Google Firebase Cloud Messaging token on Android, or a Web Push subscription);
- the station, direction, walking time and margin you chose, and the time window of the daily alert;
- the app’s language, so the alert arrives in your language.
A one-off alert is deleted after an hour or once it is sent. A daily alert stays until you turn it off; it is also deleted if your phone stops accepting notifications (for example, if you delete the app).
Notifications are delivered by your phone’s system service: Apple Push Notification service on iPhone and Google Firebase Cloud Messaging on Android. They only receive the alert text and the notification address.
Reporting a problem
If you report a problem at a station (for example, a broken escalator), our server keeps:
- the station, line and direction, the kind of problem and any text you write (optional);
- the app’s random identifier and a hashed summary of your IP address, only to prevent abuse and repeats.
Reports are seen only by us, to decide whether to publish a notice. A published notice never says who reported it. Reports are deleted after 7 days.
On your phone
Favourites, trips and preferences are stored only on your phone and disappear when you delete the app.
What we don’t do
- No accounts, and we don’t collect names, emails or contacts.
- No ads, no usage analytics and no tracking across apps or websites.
- We don’t sell or share data with third parties, apart from the technical services listed above.
Infrastructure
The server runs on Cloudflare, which keeps short-lived technical request logs (such as IP addresses) for security and operation. Waiting times come from Metropolitano de Lisboa’s public API.
Your rights
Under the GDPR you can ask for access to or deletion of your data. As there are no accounts, the simplest way is to turn off alerts in the app; for anything else, write to riyea.studio@gmail.com.